27 matches found
WordPress Spice Starter Sites Plugin <= 1.2.5 is vulnerable to Cross Site Scripting (XSS)
Software Spice Starter Sites Type Plugin Vulnerable versions = 1.2.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-44003 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5d2624fbd2e7 Credits Le Ngoc Anh Required privilege...
CVE-2022-44003
creationtimestamp| type| source ---|---|--- 2022-11-17 16:01:53+00:00| seen| https://t.me/cibsecurity/53055 2025-04-30 14:13:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14036...
CVE-2022-44003
An issue was discovered in BACKCLICK Professional 5.9.63. Due to insufficient escaping of user-supplied input, the application is vulnerable to SQL injection at various locations...
CVE-2022-44003
CVE-2022-44003 affects BACKCLICK Professional 5.9.63. The issue arises from insufficient escaping of user-supplied input, causing SQL injections at various locations. CVSS v3.1 base score is 9.8 (CRITICAL): network attack vector, low attack complexity, no privileges required, no user interaction,...
CVE-2021-44003
creationtimestamp| type| source ---|---|--- 2021-12-14 14:13:10+00:00| seen| https://t.me/cibsecurity/33905...
CVE-2021-44003
The CVE-2021-44003 vulnerability affects Siemens JT2Go (all versions < 13.2.0.5) and Teamcenter Visualization (all versions
Siemens JT2Go and Teamcenter Visualization
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: JT2Go and Teamcenter Visualization Vulnerabilities: Out-of-Bounds Write, Use of Uninitialized Variable, Out-of-Bounds Read, Off-by-One Error, Use-after-Free 2. RISK EVALUATION Successful exploitation of...